Backups & data

Where is my data?

Bookings, customers, laps, and audit logs live in a multi-tenant Postgres on Supabase. Each row is tagged with your venue_idand access is enforced by Row-Level Security; even our own app code can't read across venues without going through an audited super-admin path.

Backups

• Postgres point-in-time recovery is enabled with a 7-day window on the platform database.
• Daily logical backups (pg_dump) are kept for 30 days off-site.
• Payment credentials are encrypted at rest with pgsodium; the keyring is held outside the app database.

Export

From Settings → Data export (coming v2) you can request a CSV bundle of bookings + customers. In the meantime, email hello@pitwallos.com and we'll send a dump within 1 business day.

Deleting data

Customer-initiated data deletion (per India's DPDP Act) runs through the admin console. Deletes are propagated within 48 hours and confirmed via email.